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Top Stories 

• Hundreds of flights from the Dallas-Fort Worth area were canceled April 4 after two 
tornadoes caused widespread damage. Dozens were injured, 2 cities declared disaster 
zones, and approximately 12,000 people were left without power after the tornadoes swept 
through the area April 3. - New sCore (See item 8) 

• An outbreak of Salmonella illnesses, possibly linked to sushi, sickened 90 people in 19 
states and Washington, D.C., as of April 2, according to the U.S. Food and Drug 
Administration. - Food Safety News (See item 13) 

• The lack of rainfall in Kansas in 201 1 led to intense declines in ground water levels around 
the state, according to the Kansas Geological Survey. - Associated Press (See item 17) 

• Whooping cough disease reached epidemic levels in Washington state, according to the 
secretary of health April 3. - Washington State Department of Health (See item 22) 
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Energy Sector 



Current Electricity Sector Threat Alert Levels: Physical: LOW, Cyber: LOW 

Scale: LOW, GUARDED, ELEVATED, HIGH, SEVERE [Source: ISAC for the Electricity Sector (ES-ISAC) - 
rhttp://www.esisac.coml 



1. April 4, Associated Press - (New Mexico) Storm knocks over more than 100 utility 
poles. A powerful storm that passed through New Mexico April 4 knocked over 150 
power poles in the northeastern part of the state leaving more than 900 homes without 
power. After assessing the damage, utility officials said it could be days before service 
is restored. A manager with the Springer Electric Cooperative said winds came through 
and shattered the wooden power poles. Electric utility officials said crews were moving 
through as fast as they could to replace the poles and get power restored. Extra crews 
were called in from Arizona and Texas to help. 

Source: http://www.newswest9.com/storv/17329671/storm-knocks-over-more-than- 
100-utility-poles 

2. April 3, Fort Worth Star-Telegram - (Texas) About 40,000 in north Texas without 
power. Tens of thousands of north Texas homes and businesses, concentrated in the 
south Arlington and Lancaster areas, remained without power April 3 after storms and 
tornadoes raked the area. Oncor Electric Delivery, which operates most of the power 
lines in the region, said about 15,000 customers in Tarrant County and about 18,000 in 
Dallas County were in the dark. In all, more than 40,000 customers in Oncor’ s service 
area were without power. A spokeswoman said the utility was calling in dozens of 
crews from unaffected parts of its service area in central and west Texas and will be 
working through the night to restore power. It was expected to take until April 4 to get 

a firm estimate on how long that will take, she said. The Insurance Council of Texas, an 
Austin-based industry group, said it was too early to make a dollar estimate of the 
damage to insured property as a result of the storms. 

Source: http://blogs.star-telegram.com/storm troopers/20 12/04/about-40000-in-north- 
texas-without-power.html 

3. April 3, Great Falls Tribune - (Montana) Oil, gas board to begin ‘risk-based’ well 
inspections. The Montana Board of Oil and Gas Conservation — told in a September 
2011 legislative audit to improve its inspections and enforcement of oil and gas well 
operations — asked the petroleum department at Montana Tech to assist in making 
improvements, the Great Falls Tribune reported April 3. One recommendation in the 
audit was that the division develop a formal risk-based inspection approach that 
establishes inspection priorities. 

Source: http://www.greatfallstribune.com/article/20120403/NEWS01/1204030Q7/Oil- 
gas-board-begin-risk-based-well-inspections?odyssev=navlhead 



4. April 3, Associated Press - (Pennsylvania) DEP OKs $725M in pollution controls for 
Pa. plant. The Pennsylvania Department of Environmental Protection (DEP) approved 
$725 million worth of pollution control equipment for a coal-fired western 
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Pennsylvania power plant, the Associated Press reported April 3. The Homer City 
Generating Station is the state’s second-largest coal-fired plant and produces enough 
energy to power 2 million homes. The plant is owned by General Electric and operated 
by Irvine, California-based Edison Mission Energy, which says the new equipment will 
reduce sulfur dioxides by 84 percent, mercury by 90 percent, and soot by 57 percent. 
Environmentalists claim the sulfur dioxide controls are not good enough to meet 
proposed stricter federal standards and might make soot worse. 

Source: http://www.wvtv.com/content/news/pastate/story/DEP-OKs-725M-in- 
pollution-controls-for-Pa-plant/vkNtpGwNeU6unR9S5A39 Q.cspx 



T Return to top i 

Chemical Industry Sector 



See item 9 



T Return to top] 

Nuclear Reactors, Materials and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

5. April 4, Associated Press - (National) Chinese hedge and grass trimmers recalled 
following reports of fuel leaks. Thousands of Chinese-made grass and hedge trimmers 
were recalled due to fuel tank leaks, according to a Consumer Product Safety 
Commission announcement April 4. Trimmers made by Husqvarna Machinery 
Manufacturing Co. Ltd. were found to leak between the fuel line and the tank. No 
injuries were reported. The commission said the trimmers should be returned to the 
place of purchase for a free repair. The recall included about 19,500 grass trimmers and 
6,500 hedge trimmers that were sold from May 201 1 to January 2012. 

Source: http://www.washingtonpost.com/business/chinese-hedge-and-grass-trimmers- 
recalled-following-reports-of-fuel-leaks/2012/04/04/gIQALTtHvS story.html 

T Return to top i 



Defense Industrial Base Sector 

Nothing to report 
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Banking and Finance Sector 
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6. April 4, eWeek - (International) Some Zeus bots still active after Microsoft 
takedown, FireEye says. In March, Microsoft officials said in they and several 
partners were able to take over a major part of the infrastructure of a Zeus botnet, 
shutting down command and control (C&C) centers in Illinois and Pennsylvania as part 
of what they called Operation b71. However eWeek reported April 4 that security 
experts are saying that while the operation shut down the bulk of the bots, a few remain 
and are still in operation. According to a researcher FireEye ’s Malware Intelligence 
Lab, three domains remain in operation, including one Zeus variant that partially 
recovered from Microsoft’s efforts and is known for quickly changing its C&C 
domains. Since January, according to FireEye’s count, the company found 156 C&C 
domains used by the Zeus botnet. In Operation b71’s “sinkhole” effort, Microsoft was 
able to take over 147 of the domains. FireEye listed two domains as dead and four 
others abandoned. Zeus malware uses keylogging to access user names and passwords 
from a PC, enabling cyber-criminals to steal people’s online identities. 

Source: http://www.eweek.eom/c/a/Security/Some -Zeus-Bots-Still- Active- After- 
Microsoft-Takedown-FireEve-Says-55 1157/ 



7. April 3, Federal Bureau of Investigation - (Arizona) Phoenix Valley pair plead guilty 
to $5.3M mortgage fraud scheme. An Arizona mortgage broker and her former 
associate each admitted to conspiring to commit a multiple-transaction mortgage fraud 
that federal law enforcement calculates resulted in a loss to defrauded financial 
institutions of approximately $5,300,000. She entered a guilty plea to one count of 
conspiracy to commit wire fraud in federal court April 2. Her accomplice previously 
entered his guilty plea to one count of conspiracy to commit wire fraud. The woman 
held herself out to be a mortgage broker, loan officer, and real estate investor. She was 
president of Golden Opportunity Investments, located in Scottsdale. The accomplice 
operated a construction and remodeling company, Arizona Cooling Control Plus. Both 
admitted that between May 2005 and February 2007, they recruited straw buyers with 
good credit scores to purchase residential properties. In order to qualify for mortgage 
financing, they had the straw buyers submit loan applications and supporting 
documents that misrepresented their incomes, assets, liabilities, employment status, and 
intent to occupy the properties. At the close of escrow, they obtained a portion of the 
loan proceeds as “cash back” to be used for mortgage payments and for their own 
personal enrichment. They each admitted their fraudulent scheme resulted in the 
purchase of at least 17 residential properties, obtaining loans in the total amount of 
nearly $17 million. All 17 properties went into foreclosure. 

Source: http://www.loansafe.org/phoenix-vallev-pair-plead-guiltv-to-5-3m-mortgage- 
fraud-scheme 



T Return to top i 

Transportation Sector 

8. April 4, NewsCore - (Texas) Hundreds of flights canceled as Dallas counts cost of 
tornadoes. Hundreds of flights from Dallas-Fort Worth and Love Field airports were 
canceled April 4 after two powerful tornadoes caused widespread damage. Dozens of 
people were injured and two cities declared disaster zones after the tornadoes swept 
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through the Dallas-Fort Worth area April 3. More than 100 aircraft at both airports 
were damaged by baseball-sized chunks of hail, causing more than 200 departures to be 
canceled. Around 1,400 passengers spent the night in the terminals at Dallas-Fort 
Worth. The airport distributed cots, blankets, pillows, and toiletry kits. Thousands of 
other passengers went to area hotels. The storm was expected to move eastward April 4 
toward the Lower Mississippi Valley and parts of the Mid- Atlantic, before extending to 
New Orleans and Tallahassee, Florida. In Texas, Arlington and Lancaster were 
declared disaster zones April 3 as the tornadoes tore through houses, threw tractor- 
trailers into the air, and left debris strewn across streets. The Texas governor activated 
the Texas State Operations Center in San Antonio. Three hundred buildings in 
Lancaster, 15 miles south of Dallas, were damaged, and the city’s recreation center was 
used as a shelter. The home of the Texas Rangers in Arlington was also hit as a twister 
caused significant damage to homes and businesses. One person was critically injured 
and another six were hurt. At least four people were hospitalized. The National 
Weather Service spotted “potentially deadly” tornadoes near Greenville, northeast of 
Dallas. There were no reports of fatalities, but emergency crews still were assessing the 
impact of the storms, which also lashed the heavily-populated area with rain and 
baseball- sized chunks of hail. Approximately 12,000 people in the Fort Worth area 
were left without power. 

Source: http://www.foxnews.com/us/2012/04/Q4/hundreds-flights-canceled-as-dallas- 
counts-cost-tomadoes/ 



9. April 4, WSPA 7 Spartanburg - (North Carolina) Crews cleaning up after 1-26 tanker 
crash in Henderson County. Emergency crews were on the scene of an accident that 
shut down 1-26 in Henderson County, North Carolina. Troopers said April 3, a tanker 
truck was traveling east on 1-26 and overturned just before the Peter Guice Memorial 
Bridge, also known as the Green River bridge. The truck slid out onto the bridge and 
burst into flames from sulfuric acid the tanker was carrying. The driver was taken to the 
hospital. The Western North Carolina HAZMAT Team remained on the scene. The 
North Carolina Department of Transportation established detour routes to help drivers 
avoid the area. A bridge engineer on the scene said there were five bridge engineers 
currently going over the bridge to look for any structural damage. 

Source: http://www2.wspa.com/news/2012/apr/03/40/tanker-truck-carrying-sulfur- 
crashes-i-26-ar-3538527/ 



10. April 4, KHOU 11 Houston - (Texas) Hydrochloric acid spill shuts down 1-10 near 
San Antonio. HAZMAT units responded to a hydrochloric acid leak in the northbound 
lanes of I- 10 west near DeZavala Road late April 3 near San Antonio. The roadway 
was still closed April 4. A spokesman for TxDOT said they are unsure how long it 
would take to clear the roadway, and unsuspected setbacks delayed the cleanup. The 
spill occurred after an 18-wheeler hauling the acid was involved in a major accident 
near Woodstone. The concern was that if the leak was not contained in time, 3,000 
gallons of the acid could eat the highway. That could be a costly consequence and a 
threat to public health, as hydrochloric acid is a corrosive solution that can cause an 
unpleasant odor, nausea, or dizziness. 

Source: http://www.khou.com/news/texas-news/Hvdrochloric-acid-spill-shuts-down-I- 
10-near-San-Antonio-146107945.html 
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For another story, see item 38 
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Postal and Shipping Sector 

11. April 3, Manassas News & Messenger - (Virginia) Unknown substance identified 
outside Prince William Hospital. A package with white powder was deemed safe 
April 3, but only after two people were decontaminated at Prince William Hospital. The 
Manassas, Virginia fire marshal said the substance was magnesium carbonate. A FedEx 
driver handled the package near a K-mart, then began to feel ill, and went to the 
hospital. According to a Prince William Fire and Rescue spokeswoman, the county 
HAZMAT team set up a safety zone and enclosed the area surrounding the vehicle the 
FedEx employees arrived in. While HAZMAT teams tested the substance, investigators 
spoke with the person receiving the package. The recipient said it was magnesium 
carbonate, being sent from Trinidad and Tobago. Tests confirmed the substance with 
97 percent certainty, and the area was reopened. 

Source: http://www2.insidenova.com/news/2012/apr/03/17/fire-hazmat-substance- 
prince- william-hospital-ar- 1 815278/ 

For another story, see item 30 



T Return to topi 

Agriculture and Food Sector 

12. April 3, Food Safety News - (National) Final report on Jimmy John’s E. coli 

outbreak: 29 ill in 11 states. The Centers for Disease Control and Prevention (CDC) 
issued a final report on the multistate outbreak of E. coli infection linked to sprouts in 
Jimmy John’s sandwiches, Food Safety News reported April 3. Between late December 
2011 and early March, 29 individuals were infected with E. coli 026 traced to raw 
clover sprouts from Jimmy John’s Gourmet Sandwich restaurants. The case count in 
the Final Case Update is up 4 from the last update March 8, which identified 25 
victims. Three of the new cases were from states that had not reported any outbreak- 
related illnesses as of March. Those states — Pennsylvania, Washington, and West 
Virginia — each reported one case. Michigan’s victim count rose from 2 to 3. The final 
breakdown of cases by state is as follows: Alabama (1), Arkansas (1), Iowa (5), Kansas 
(2), Michigan (10), Missouri (3), Ohio (3), Pennsylvania (1), Washington (1), 
Wisconsin (1), and West Virginia (1). Of the 27 victims interviewed, 85 percent 
reported eating sprouts at Jimmy John’s in the 7 days before their symptoms began. 
Source: http://www.foodsafetvnews.com/2012/04/final-report-on-iimmv-iohns-e-coli- 
outbreak-released/ 



13. April 3, Food Safety News - (National) Salmonella outbreak may be linked to 
sushi. An outbreak of illnesses caused by Salmonella Bareilly poisoning, possibly 
linked but not confirmed to be associated with sushi, has sickened 90 people in 19 
states and Washington, D.C., as of April 2, according to sources within the U.S. Food 



- 6 - 



and Drug Administration (FDA). According to an internal FDA e-mail, the Centers for 
Disease Control and Prevention (CDC) has characterized this outbreak as “ongoing and 
rapidly expanding,” particularly due to the prolonged reporting lag time (which can be 
up to 32 days after a patient’s infection is confirmed by lab analysis). Seven people 
reportedly were hospitalized. The FDA worked with the CDC in investigating the 
outbreak and is continuing to eliminate other possible vehicles as the source of the 
illnesses. CDC officials postulate that sushi is the likely source of this outbreak, with 
spicy tuna roll sushi “highly suspect.” The FDA source said data collected by the states 
and the agency’s district offices focuses on six implicated restaurant clusters where 
diners reported illness. Those clusters are in Texas, Maryland, Rhode Island, and 
Connecticut, and two are in Wisconsin. 

Source: http://www.foodsafetvnews.com/2012/04/salmonella-outbreak-mav-be-linked- 
to-sushi/ 



14. April 3, US Food Safety - (Arizona; Illinois; Michigan) A1 Baghdadi Food Potato 
Chop allergy alert and recall. The U.S. Department of Agriculture’s Food Safety and 
Inspection Service (FSIS) announced A1 Baghdadi Food, a Hazel Park, Michigan 
establishment, is recalling approximately 5,400 pounds of its A1 Baghdadi Food Fully 
Cooked Potato Chop with beef filling because of misbranding and undeclared 
allergens. The product contains soy and milk food allergens not declared on the label, 
US Food Safety reported April 3. The Potato Chop products were produced between 
August 16, 2011, and April 2, and were sold to retail stores, institutions, and wholesale 
establishments in Arizona, Illinois, and Michigan. The problem occurred when an 
ingredient supplier reformulated their product and the change was not reflected on the 
finished product label. The problem was discovered during a routine verification 
activity by FSIS. 

Source: http://www.usfoodsafety.com/zrl20061.aspx 

15. April 3, Associated Press - (California) Citrus quarantine in place in Hacienda 
Heights. California agriculture officials have declared a quarantine in the Hacienda 
Heights area of Los Angeles County because of a deadly citrus disease. The 93-square- 
mile area is centered near State Route 60, the California Department of Food and 
Agriculture said April 3. It extends south into Orange County, north into Baldwin Park 
and West Covina, west into South El Monte and Whittier, and east into Walnut and 
Rowland Heights. The quarantine prohibits the removal of any citrus fruit that is not 
commercially cleaned and packed. Any other fruit may not be removed from the 
property on which it is grown, although it may be consumed onsite. The disease, known 
as citrus greening, threatens California’s $2 billion citrus industry. It attacks a tree’s 
vascular system, eventually killing the tree. 

Source: http://www.sfgate.com/cgi- 
bin/article.cgi?f=/n/a/2012/04/Q3/state/nl 8 1525D3 1 .DTL 
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Water Sector 
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16. April 4, KTLA 5 Los Angeles - (California) Another water main break — this time 
in south L.A. A water main break was reported in south Los Angeles April 4, a day 
after seven other water main breaks within 3 1/2 miles of each other. Around 6 p.m. 
April 3, the Los Angeles Department of Water and Power (LADWP) reported the pipe 
repaired earlier on La Mirada had a new break near the repair point after being 
repressurized. Officials said water and power customers could be affected for 10 to 12 
hours. All the other water main breaks were repaired by the evening of April 4. At the 
peak of service interruptions April 3, about 130 LADWP customers were either without 
water or were experiencing low water flow while the pipes were fixed. A water main 
break at the intersection of Fairfax and Third Street caused part of the pavement to 
buckle. LADWP said the breaks were related to pressure changes caused by repair 
work done on the Lower Franklin Reservoir April 2. The reservoir work is expected to 
be completed by April 6. 

Source: http://www.ktla.com/news/landing/ktla-west-hollywood-water-main- 
break,0,5157137.story 

17. April 4, Associated Press - (Kansas) Drought drying out Kansas aquifers. According 
to the Kansas Geological Survey (KGS), the lack of rainfall in Kansas in 2011 led to 
intense declines in ground water levels around the state, the Associated Press reported 
April 4. KGS said the Ogallala Aquifer in southwest Kansas usually sees annual 
declines, but its average drop of 3.78 feet in 201 1 was one of the worst in decades, 
compared to a drop of about 3 feet in 2010 and 1.39 feet in 2009. Much of Kansas 
received 25 to 50 percent of normal precipitation in 201 1. “The growing season was 
probably the worst since the 1930s,” said a water data manager for the geological 
survey. In central and south-central Kansas, where ground water levels usually show 
gains or only modest declines, the water table in the Equus Beds aquifer decreased an 
average of 3.17 feet. The Big Bend region just west of the Equus Beds had a decline 
that averaged 3 feet. Farmers in the Big Bend district took out 1,056 emergency permits 
through the Kansas Department of Agriculture to overpump in 201 1, the most out of 
any district. 

Source: http://www.kansascitv.com/2012/04/04/3534830/drought-drying-out-kansas- 
aquifers.html 

18. April 3, Medford Mail Tribune - (Oregon) Eagle Point decides to stop using 
reservoir until leaks fixed. Concerned that a leaking 3.6 million gallon hillside water 
reservoir may have undermined the ground around and below it, officials in Eagle 
Point, Oregon, decided to take the tank offline April 3 until the source of the leaks 
could be found and repaired. During March, the city paid $18,000 to seal over 980 feet 
of cracks in the reservoir’s concrete floor pad, hoping that would end the leaks. The 
public works director said the process only succeeded in taking care of about 30 
percent of the problem. Testing of water coming out of drainage pipes in the reservoir 
area showed chlorine present, indicating the tank was still leaking. The director said the 
tank failed its leak test in 1996 during its construction, and it was unclear if 
recommended testing was done later. While this reservoir is offline, the city’s water 
supply will come from the recently renovated 4 million gallon reservoir, but officials 
were unsure if it would be adequate. The director said the city will have water, but if 
the leaking tank cannot be brought back online this summer, some city residents may 
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experience lower water pressures. 

Source: 

http://www.mailtribune.com/apps/pbcs.dll/article?AID=/20120403/NEWS07/20403033 
3/- 1 /NEWS MAP 



19. April 3, El Centro Imperial Valley Press - (California) Earthquake damage still not 
repaired. Repairs to the Calexico water treatment plant in California that occurred 
April 4, 2010, during the 7.2-magnitude earthquake have not yet been repaired. While 
funds have been allocated at the state level, it is the city’s responsibility to accelerate 
the repair process. The support that holds the plant’s water tank roofs together was 
damaged in the earthquake. 

Source: http://www.ivpressonline.com/news/ivp-earthquake-damage-still-not-repaired- 
20120403,0,7735578.story 



20. April 3, Bainbridge Island Review - (Washington) Treatment tank leak started late 
last week, official says. Officials with Washington’s Kitsap Public Health District said 
April 3 the leak at the Fort Ward Treatment Plant that may have sent sludge down Tani 
Creek and into Blakely Harbor was actually discovered March 30 but not reported to 
the public until April 3. Officials were not immediately aware the sludge escaped the 
grounds of the facility. The sludge leaked from a 1-inch hole in the side of a tank and 
then entered a nearby ditch, then neighboring wetlands, and then Tani Creek before 
reaching Blakely Harbor. Officials were awaiting test results to confirm pollution found 
off-site April 3 came from the Fort Ward Treatment Plant. It was the site’s first leak, 
officials said. 

Source: http://www.bainbridgereview.com/news/146031825.html 

21. April 3, Utica Observer-Dispatch - (New York) Sinkhole on Burnet Street brought 
water-main break to light. Officials in Utica, New York, became aware of an ongoing 
water main break April 2 only after a truck fell through the pavement, city police said. 
Police were called to the intersection of Burnet and Elizabeth streets after the truck’s 
tire fell into a sinkhole. No one was injured, but the road was closed so the Department 
of Public Works and Mohawk Valley Water Authority could address the problem. 
Source: http://www.uticaod.com/news/x2020322327/Sinkhole-on-Burnet-Street- 
brought-water-main-break-to-light 
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Public Health and Healthcare Sector 



22. April 3, Washington State Department of Health - (Washington) Whooping cough 
cases reach epidemic levels in Washington. April 3, the state secretary of health 
announced whooping cough disease has reached epidemic levels in Washington. So far 
in 2012, 640 cases have been reported in 23 counties as of March 31. This compares to 
94 cases during this same time period in 2011, putting Washington on pace to have the 
highest number of reported cases in decades. The State Department of Health is 
introducing a new public service radio announcement reminding people how serious 
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whooping cough can be and to get vaccinated. 

Source: http://www.doh.wa.gov/Publicat/2012 news/12-038.htm 

23. April 3, Appleton Post-Crescent - (Wisconsin) Suspect identified in Planned 
Parenthood bomb incident near Appleton. Wisconsin’s Grand Chute police 
identified the man they say is responsible for planting the homemade explosive that 
ignited a fire at a Planned Parenthood clinic April 1 with the help of surveillance video 
taken at the clinic. Police said a witness came forward April 2 who saw a white van 
leave the vicinity of Planned Parenthood at the same time flames were visible. Officers 
corroborated the information through the surveillance video. Police later learned a van 
of similar description was involved in a crash in Kaukauna about an hour after the fire 
at the chnic. The man was taken to Appleton Medical Center for treatment and the van 
was towed away. Police said the crashed van and the van in the security footage each 
carried striping along the sides “that we all thought was fairly unique.” Investigators 
said the driver involved in the crash matched the physical description of the man 
observed on Planned Parenthood security video. The man was jailed April 3 for 
violating terms of his probation and charged in federal court with arson. The man is 
being held in jail without bond. Grand Chute police detectives, the FBI, and the federal 
Bureau of Alcohol Tobacco and Firearms continue to investigate and search for more 
information that “might link this person to the situation.” 

Source: http://www.postcrescent.com/article/20 1 20403/APC0 1 0 1/1 20403095/Police- 
arrest-suspect-bomb-incident-Planned-Parenthood-clinic-story-video- 
?odyssey=nav Ihead 
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Government Facilities Sector 



24. April 4, CNN - (California) Authorities name 6 of 7 murder victims in Oakland 

college shooting. The man accused of gunning down seven people at a California 
religious college from which he was expelled was scheduled to be arraigned April 4, 
the same day authorities released the identities of six of the seven victims. The suspect 
was in an Alameda County jail, booked on charges of murder and kidnapping. 
Authorities said the suspect was upset he had been expelled from Oikos University, a 
small college in Oakland that caters primarily to the Korean- American Christian 
community. April 2, he walked into the single-story building, took a secretary hostage, 
and went looking for a particular female administrator, the Oakland Police chief said. 
Realizing the administrator was not in the classroom where he had hoped to find her, 
the suspect shot the secretary and ordered the students to line up against the wall, police 
said. Not all of them cooperated, and so he began shooting. After the shooting, the 
gunman left the classroom, reloaded his semiautomatic weapon, and returned, firing 
into several classrooms, the police chief said. In all, seven people were killed and three 
were wounded. “He planned this several weeks in advance,” the police chief told 
KTVU 2 Oakland April 3. “He was so upset he went out and purchased a weapon and 
had every intent to kill people yesterday.” Investigators determined the gun was 
obtained legally in California, but they have yet to locate it. 

Source: http://www.cnn.corn/2012/04/04/us/cahfornia-shooting/index.html?hpt=hp t3 
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25. April 4, Associated Press - (California) Students angry over raise in course prices 
pepper-sprayed at California college. Campus police pepper-sprayed as many as 30 
demonstrators after Santa Monica College students angry over a plan to offer high- 
priced courses tried to push their way into a trustees meeting April 3 in Santa Monica, 
California, authorities said. Students were angry because only a handful were allowed 
into the meeting, and when their request to move the meeting to a larger venue was 
denied, they began to enter the room, a Congressional candidate said. Two officers 
were apparently backed up against a wall and began using force to keep the students 
out of the room. The Congressional candidate said both officers used pepper spray. A 
Santa Monica College spokesman said he believed it was the first time pepper spray 
had been used to subdue students on campus. Firefighters were called to the campus 
after the incident. Five people were evaluated at the scene and two were taken to a 
hospital, a Santa Monica Fire Department captain said. Their injuries were not believed 
to be serious. 

Source: http://www.foxnews.com/us/2012/04/04/students-angry-over-raise-in-course- 
prices-pepper-sprayed-at-califomia-college/?test=latestnews 

26. April 4, Associated Press - (New Jersey) NJ man accused of threat to 
congressman. A Camden, New Jersey man was indicted on charges that he threatened 
to assault a member of Congress, the Associated Press reported April 4. Authorities 
said the man rang the doorbell at a U.S. Representative’s home January 1 1 and 
complained that the government had not paid him for work he said he did as an Iraq 
war contractor. Authorities said he threatened to harm the Democratic congressman. 
Source: http://www.app.com/article/20120404/NJNEWS10/304040037/NJ-man- 
accused-of-threat-to-congressman 

27. April 4, WRC 4 Washington, D.C. - (Maryland) More charges filed against 
University of Maryland student. More charges have been filed against the University 
of Maryland College Park (UMCP) student who allegedly made online threats of a 
rampage, WRC 4 Washington, D.C. reported April 4. The student was discharged from 
the hospital April 3 and arrested. Police charged him with disturbing the orderly 
conduct of the activities, administration, or classes of UMCP, a misdemeanor. In 
addition to the original charges, the Office of the State’s Attorney for Prince George’s 
County filed more charges including misuse of e-mail, making a false statement, 
making a false statement to a public official, misuse of telephone facilities and 
equipment, and disturbing the peace. The student allegedly wrote, “I will be on a 
shooting rampage tomorrow on campus... hopefully I kill enough people to make it to 
national news... stay away from the mall tomorrow at 1:30.” He was arrested the 
following day. Police said the suspect was unarmed at the time of his arrest. Police did 
not find weapons in his dorm room or his parents’ home. 

Source: http://www.nbcwashington.com/news/local/More-Charges-Against— 
146073765.html 



28. April 3, Associated Press - (Tennessee) 3 teens charged after bottle explodes in 
Bradley County middle school cafeteria; no one hurt. Three students were sent to a 
juvenile detention center after setting off a homemade explosive device April 3 in the 
cafeteria at Lake Forest Middle School in Bradley County, Tennessee. Three students 
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were charged with possession of a weapon on school property and reckless 
endangerment. Investigators said two students brought household chemicals and a 
plastic bottle to school, combined the items in the bottle, and gave it to a third student 
who tossed it into a trash container. A chemical reaction caused the device to explode. 
The students said they learned about the device in an Internet video. 

Source: 

http://www.therepublic.com/view/story/c85348fl70bd42bla5269aa72684807f/TN— 

School-Bottle-Explosion/ 

29. April 3, Baltimore Sun - (Maryland) Bomb threat closes Kent County schools. A 
bomb threat closed all eight Kent County public schools April 3 and forced Maryland 
State Police and local officers to search the buildings with bomb-sniffing dogs. The 
schools were closed soon after classes began and approximately 2,500 students were 
sent home for the rest of the day. The search continued throughout the day, but no 
explosive devices had been detected by late afternoon, school officials said. School 
officials confirmed they found a note early April 3 at Kent County Middle School in 
Chestertown. The note contained threats to every school building in the district, 
officials said. The threat was credible enough to order an evacuation, officials said. 
Classes were expected to resume on time April 4. 

Source: http://articles.baltimoresun.com/2012-04-03/news/bs-md-kent-schools-closed- 
20120403 1 bomb-threat-schools-exact-contents 



30. April 3, Associated Press - (Iowa) Iowa Capitol opened after powder prompts lock 
down. Authorities locked down the Iowa Statehouse in Des Moines for several hours 
April 3 after a legislator opened an envelope containing a suspicious white powder and 
a threatening letter. The representative opened the envelope on the House floor, and 
lawmakers quickly sought the advice of the Iowa State Patrol. Officers ordered that the 
Statehouse be closed while postal inspectors, and a Des Moines hazardous materials 
crew rushed to the building. About 4 hours later, officers announced the powder was 
deemed harmless and people could leave the building. 

Source: http://www.wtop.com/?nid=209&sid=28 13766 

For another story, see item 8 
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Emergency Services Sector 

31 .April 4, Associated Press - (Colorado) 911 calls questioned in Colorado wildfire 
deaths. A man and his wife were among the first to begin calling 9-1-1 about a wildfire 
burning near their home on the outskirts of Denver March 26, but the dispatcher, 
having already answered a handful of calls about the fire, cut him off to tell him it was 
a controlled burn and that the forest service was on the scene. The man and his wife 
were later found dead at their burned out home. The 9-1-1 calls raised further questions 
about emergency officials’ response to the fast-growing fire, which authorities believe 
killed three people, damaged or destroyed more than two dozen homes, and burned 6 
square miles in the mountains southwest of Denver. Residents began calling to express 
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concern about the fire and high winds around 2 p.m., and at first dispatchers assured 
them the heavy smoke and flames were not a threat. Later, they acknowledged there 
was some trouble with a prescribed burn but told callers that firefighters were at the 
scene. A Jefferson County sheriff’s office spokeswoman said sheriff’s officials were 
aware the controlled burn broke its perimeter that afternoon but she said the agency did 
not know the fire got out of control until a local fire department sent a notification at 5 
p.m. “We have to listen to what groups in the field are telling us,” she said of why 
evacuations were not called earlier. “If they’re saying there’s a controlled bum and the 
state forest service is on the scene, we don’t just create evacuations for a fire that has 
gone outside the perimeter.” It appears the fire was sparked by a controlled bum set 4 
days earlier by the Colorado State Forest Service, which said embers escaped from the 
bum sometime March 26. A review of what happened was ordered by the governor. 
Source: http://www.firehouse.com/news/10688298/911-calls-questioned-in-colorado- 
wildfire-deaths 



32. April 3, KMGH 7 Denver - (Colorado) Denver 911 admits fault in man’s 

slaying. Denver 9-1-1 admitted one of its operators did not follow protocol when they 
asked a man to return to the scene of an altercation to talk to police and was then killed 
in a drive-by shooting. A Denver Police spokeswoman said the victim was driving with 
three others April 1 when people in a red Jeep began throwing bottles and debris at 
their car, breaking a window. The operator who took the call told the victims to return 
and wait for officers to arrive. The car, with four people inside, returned and stopped to 
wait for police. As the people were standing outside the parked car, the red Jeep, 
carrying about four men, drove by and opened fire on them, shooting the victim in the 
back, police said. The operator is on leave while an investigation into the shooting is 
completed. Police said the dispatcher should have worked with Wheat Ridge police and 
to have them meet the 9-1-1 callers. 

Source: http://www.thedenverchannel.com/news/30820247/detail.html 
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Information Technology Sector 

33. April 4, H Security - (International) Joomla! 2.5.4 closes more security holes. Two 
weeks after its last security update, the Joomla! project published another update to the 
2.5.x branch of its open source content management system which addresses two 
vulnerabilities. Version 2.5.4 of Joomla! closes an information disclosure hole that 
allowed unauthorized access to administrative information and fixes a problem that 
could have been exploited by an attacker to conduct cross-site scripting attacks. 
Versions 2.5.0 to 2.5.3 are affected. 

Source: http://www.h-online.com/security/news/item/Joomla-2-5-4-closes-more- 
security-holes-1501510.html 

34. April 4, Help Net Security - (International) Cybercriminals target Google, Linkedln 
and Mass Effect 3 users. During March, GFI Labs documented several spam attacks 
and malware-laden e-mail campaigns infiltrating users’ systems under the guise of 
communications purporting to be from well-known companies and promotions for 
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popular products and services. Google, Linkedln, Skype, and the video game Mass 
Effect 3 were among the brands exploited by cybercriminals in order to attract more 
victims. “Taking advantage of the notoriety of companies, celebrities and major events 
is a tactic cybercriminals continue to use because it works,” said a senior threat 
researcher at GFI Software. “They know that Internet users are bombarded with 
countless emails every day, and these scammers prey on our curiosity and our reflex- 
like tendency to click on links and open emails that look like they’re coming from a 
company we know and trust,” he added. 

Source: http://www.net- 

security.org/malware news.php?id=2055&utm source=feedburner&utm medium=fee 
d&utm campaign=Feed: +HelpNetSecuritv+(Help+Net+Securitv)&utm content=Goog 
le+Reader 



35. April 3, Threatpost - { International) Apple issues update to prevent Flashback 
malware from infecting Mac OS X machines. Fess than a day after reports began 
surfacing that the Flashback trojan was hitting Mac OS X machines, Apple released a 
fix to stop the latest variant of the pas sword- stealing malware April 3. The update 
closes numerous vulnerabilities in Java 1.6.0_29, including a serious hole that allowed 
an untrusted Java applet to help spread the malicious code. The quick turnaround is 
another indication of the widespread threat posed by the continuously mutating 
Flashback malware since millions of Web pages run on Java, and computers can 
become infected merely by a user visiting a malicous page. April 3, Threatpost reported 
Mozilla blacklisted all but the most recent version of Java to protect users who may not 
be aware of the flaw and attacks. Flashback is believed to target Safari and Firefox 
Web browsers. The Apple product update is available for Mac OS X vlO.6.8, Mac OS 
X Server vlO.6.8, OS X Fion vlO.7.3, and Fion Server vlO.7.3. According to Apple, 
“the most serious of the vulnerabilities allowed an untrusted Java applet to execute 
arbitrary code outside the Java sandbox.” The patch also addresses numerous other Java 
vulnerabilities. Despite taking less than a day to issue the update after security 
researchers publicly announced the trojan hit the Mac platform, numerous security sites 
also noted Oracle released a patch to fix the Java flaw for Windows in February. 

Source: http://threatpost.com/en us/blogs/apple-issues-update-prevent-flashback- 
malware-infecting-mac-os-x-machines-040312 

36. April 3, Computerworld - (International) Path tightens mobile app security. Social 
networking service Path upgraded the security of its mobile application in apparent 
response to a recent outcry over its data gathering practices. In a statement, Path said a 
newly released 2.1.1 version of its software automatically hashes all user contact 
information in order to protect the privacy of the data. All phone numbers, e-mail 
addresses, Twitter handles, and Facebook IDs Path collects in order to connect users 
with their contacts will be hashed in future, according to the statement. Path’s move 
comes several weeks after the company found itself in the middle of a major privacy 
row after a programmer described how Path’s journaling application for iOS and 
Android-powered phones, used by over 2 million users, was secretly collecting user 
address book data. The disclosure drew widespread attention to the data collection 
practices of mobile application vendors in general, and the processes platform vendors 
such as Apple and Google use for vetting those vendors. 
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Source: 

http://www.computerworld.eom/s/article/9225819/Path tightens mobile app security 



For another story, see item 6 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT IS AC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



37. April 4, CNET News - (International) TomTom releases fix for ‘leap year’ 

bug. Satellite navigation maker TomTom released an update to fix a software glitch 
that left customers worldwide complaining about not being able to find their location, 
CNET News reported April 4. The problem, which began March 31, meant the sat-navs 
failed to get a GPS position. Instead, users saw a gray screen or a message saying the 
GPS signal was poor. The Dutch company apologized for the glitch April 4, which it 
said was caused by a “leap year” bug in the GPS receiver software from a third-party 
supplier. “A software update fixing the issue is now available via MyTomTom,” it said 
in a statement, directing owners to a support Web page. While the company did not 
directly identify which models were affected, its support page gives instructions for 
installing the update on the Start 20/25, Via 1 10/120/125, the Via Live 120/125, the Go 
Live 820/825, and the Go Live 1000/1005 and 1005 World. 

Source: http://news.cnet.com/8301-1035 3-57409287-94/tomtom-releases-fix-for- leap- 
year-bug/ 

38. April 3, KTVI 2 St. Louis; KPLR 11 St. Louis - (Missouri) Cut fiber optic cable causes 
MetroLink delays. MetroLink customers in St. Louis, Missouri, were told April 3 to 
expect approximate 30-minute delays throughout the day. A fiber-optic cable was 
damaged and was affecting communications with MetroLink system and trains. Trains 
were moving but were behind schedule. The Blue Line was operating only between the 
Shrewsbury 1-44 MetroLink Station and the Forest Park-DeBaliviere MetroLink 
Station. Blue Line customers traveling east beyond the Forest Park-DeBaliviere 
MetroLink Station needed to board an eastbound Red Line train. 

Source: http://southcitv.fox2now.com/news/transportation/85926-cut-fiber-optic-cable- 
causes-metrolink-delays 
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39. April 4, WAOI 4 San Antonio - (Texas) Apartment building destroyed by fire. Fire 
destroyed an apartment building in San Antonio April 4. Fire crews were called to the 
Connemara Estates when a resident spotted smoke and flames coming from the back of 
a unit in Building 8 at the complex. Firefighters were able to prevent the flames from 
spreading to other buildings, but Building 8 was a total loss. No serious injuries were 
reported. 

Source: http://www.woai.com/mostpopular/storv/Apartment-building-destroyed-bv- 
fire/2dBFTtcKN0qU9tKWhifiXQ.cspx 

40. April 4, WNBC 4 New York - (New York) Fire guts landmark church on Long 
Island. A fire struck a landmark 127- year-old church on Long Island, New York, April 
3, causing damage to the interior of the historic building. The cause of the fire was 
under investigation, according to Suffolk County police. Six departments extinguished 
the fire in about an hour. No one was injured. The “Little Church” has not hosted daily 
services since the 1980s, but it has long been the home of the Roman Catholic parish’s 
youth ministry. 

Source: http://www.nbcnewvork.com/news/local/Lire-Little-Church-Bohemia- Long- 
Island-Landmark- 1 46007 805 .html 



Lor another story, see item 8 
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National Monuments and Icons Sector 

Nothing to report 
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Dams Sector 

41. April 3, WALB 10 Albany - (Georgia) Father of dam explosive suspect 

arrested. Authorities in Albany, Georgia, arrested the father of a man who was caught 
with explosives April 2 at the Georgia Power Dam. The father was held on 6 counts of 
possessing a destructive device April 3. His son was released from jail after making 
bond April 2. 

Source: http ://ww w. walb .com/story/ 17317 1 28/father-of 
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